diff --git a/nw/hw.md b/nw/hw.md
index 81434ed..c560b97 100644
--- a/nw/hw.md
+++ b/nw/hw.md
@@ -14,8 +14,7 @@
     - [Firmware](#firmware)
     - [custom scripts](#custom-scripts)
 - [Unifi-AC-Lite/LR](#unifi-ac-litelr)
-    - [Commands](#commands)
-    - [Issues](#issues)
+    - [Controller Web](#controller-web)
 
 <!-- /TOC -->
 
@@ -147,11 +146,12 @@ Mem:(Lite)        126316        62272        64044            0            0
 Mem:(LR)        126272        66764        59508            0            0
 -/+ buffers:              66764        59508
 Swap:            0            0            0
+
+BZ.v3.7.5# info
+BZ.v3.7.5# set-inform http://unifi:8080/inform
 ```
 
-## Commands
-    BZ.v3.7.5# info
-    BZ.v3.7.5# set-inform http://unifi:8080/inform
+## Controller Web
 
-## Issues
-Every minor setting change on controller causes SSID reset.
\ No newline at end of file
+    Settings - Sie DEVICE AUTHENTICATION
+    Every minor setting change on controller causes SSID reset.
\ No newline at end of file
diff --git a/web/IBM_IHS.md b/web/IBM_IHS.md
index 491654f..ad8783e 100644
--- a/web/IBM_IHS.md
+++ b/web/IBM_IHS.md
@@ -1,4 +1,17 @@
+<!-- TOC -->
 
+- [Docker](#docker)
+- [Windows](#windows)
+
+<!-- /TOC -->
+
+# Docker
+https://hub.docker.com/r/ibmcom/ibm-http-server
+
+    docker run --name ibm-http-server -h IHS \
+    -d --restart unless-stopped \
+    --net host -v /:/host \
+    ibmcom/ibm-http-server  
 
 # Windows
 
diff --git a/web/IBM_Websphere.md b/web/IBM_Websphere.md
index cda7067..412c2a1 100644
--- a/web/IBM_Websphere.md
+++ b/web/IBM_Websphere.md
@@ -1,4 +1,10 @@
-<!-- TOC -->autoauto- [liberty](#liberty)auto- [License](#license)auto- [traditional](#traditional)autoauto<!-- /TOC -->
+<!-- TOC -->
+
+- [liberty](#liberty)
+- [License](#license)
+- [traditional](#traditional)
+
+<!-- /TOC -->
 
 # liberty
 https://www.ibm.com/support/knowledgecenter/en/SS7K4U_liberty/com.ibm.websphere.wlp.zseries.doc/ae/rwlp_feat.html
@@ -33,5 +39,11 @@ Version 8.5 and 8.0: not supported for use in a production environment.
 	docker exec websphere cat /tmp/PASSWORD 
 	# https://localhost:9043/ibm/console/login.do?action=secure | user: wsadmin
 
+	docker run --name was85 -h was85 \
+	-v $(pwd)/PASSWORD:/tmp/PASSWORD \
+	-p 9043:9043 -p 9443:9443 \
+	-d --restart unless-stopped \
+	ibmcom/websphere-traditional:8.5.5.14-profile
+
 [WAS V8.5 Administration and Configuration Guide for the Full Profile(PDF)](http://www.redbooks.ibm.com/redbooks/pdfs/sg248056.pdf)
 
diff --git a/web/README.md b/web/README.md
index 029f0e2..29ce127 100644
--- a/web/README.md
+++ b/web/README.md
@@ -1,5 +1,18 @@
-
-
+<!-- TOC -->
+
+- [HAProxy Health Check](#haproxy-health-check)
+- [Squid - caching HTTP, HTTPS, FTP, and more](#squid---caching-http-https-ftp-and-more)
+- [Debugging](#debugging)
+- [SNI](#sni)
+- [Varnish](#varnish)
+- [Cloudflare](#cloudflare)
+    - [CNAME Flattening](#cname-flattening)
+    - [Real IP](#real-ip)
+- [Github pages](#github-pages)
+- [Google Analytics](#google-analytics)
+    - [Enhanced Link Attribution](#enhanced-link-attribution)
+
+<!-- /TOC -->
 
 # HAProxy Health Check
 https://www.haproxy.com/documentation/aloha/7-0/haproxy/healthchecks/#checking-a-http-service
diff --git a/web/SSL.md b/web/SSL.md
index a71629f..fdd8c21 100644
--- a/web/SSL.md
+++ b/web/SSL.md
@@ -1,4 +1,27 @@
-
+<!-- TOC -->
+
+- [Cryptography](#cryptography)
+    - [Key exchange or key establishment](#key-exchange-or-key-establishment)
+    - [cipher or cypher](#cipher-or-cypher)
+    - [Cryptography libraries compare](#cryptography-libraries-compare)
+    - [X.509](#x509)
+    - [Certificate Revocation List (or CRL)](#certificate-revocation-list-or-crl)
+    - [TLS Extensions - Certificate Status Request](#tls-extensions---certificate-status-request)
+    - [Certificate formats](#certificate-formats)
+    - [ECDSA vs RSA](#ecdsa-vs-rsa)
+- [SSL](#ssl)
+    - [Private Key](#private-key)
+    - [Let's Encrypt](#lets-encrypt)
+        - [Wildcard](#wildcard)
+    - [Cloudflare](#cloudflare)
+    - [Mozilla SSL Configuration Generator](#mozilla-ssl-configuration-generator)
+- [Nginx](#nginx)
+    - [SSL](#ssl-1)
+- [Cloudflare](#cloudflare-1)
+    - [SSL Modes](#ssl-modes)
+    - [HTTPS](#https)
+
+<!-- /TOC -->
 
 
 # Cryptography
@@ -93,6 +116,12 @@ https://github.com/Neilpang/acme.sh#10-issue-wildcard-certificates
 
     acme.sh  --issue -d example.com  -d '*.example.com'  --dns dns_cf
 
+https://community.letsencrypt.org/t/wildcard-domain-step-by-step/58250/4
+
+    certbot certonly --server https://acme-v02.api.letsencrypt.org/directory \
+    --manual --preferred-challenges dns \
+    -d 'yourdomain.tld,*.yourdomain.tld'
+
 ## Cloudflare
 https://blog.cloudflare.com/cloudflare-ca-encryption-origin/ (15-years wildcard)
 
diff --git a/web/nginx.md b/web/nginx.md
index 36bf4a7..5fc3895 100644
--- a/web/nginx.md
+++ b/web/nginx.md
@@ -1,3 +1,10 @@
+<!-- TOC -->
+
+- [plain text/index/debug/proxy](#plain-textindexdebugproxy)
+- [upstream](#upstream)
+
+<!-- /TOC -->
+
 ## plain text/index/debug/proxy
 https://www.nginx.com/resources/wiki/start/topics/examples/full/